Privacy Policy

Effective date: 1 September 2026  ·  Last updated: 1 September 2026

Who we are

Stanford Knight & Partners Limited (“SKP”, “we”, “us”) is a licensed citizenship and immigration advisory firm incorporated in the Republic of Vanuatu.

• Registered office: One, The Parc, Winston Churchill Avenue, Port Vila, Vanuatu
• Website: https://www.stanfordknight.com
• Privacy contact: info@stanfordknight.com

We are the data controller for the personal information described in this policy.

What this policy covers

This policy explains what we do with personal information collected through this website.

If you go on to become a client, a much wider set of information is collected as part of the application and due diligence process — identity documents, source of funds and wealth evidence, background checks, and information about family members included in an application. That process is governed by a separate client privacy notice and engagement letter provided to you at onboarding. The section “If you become a client” below summarises how it differs.

What we collect through this website

When you send us an enquiry. The name, email address, telephone number, country of residence and message content you enter into our enquiry form. We use this to respond to you and, if relevant, to assess whether we can assist.

When you browse. Standard analytics information about how the site is used — pages viewed, approximate location derived from IP address, referring website, device and browser type. This is collected only if you consent to analytics cookies. See our Cookie Policy.

Server logs. Our hosting provider records IP addresses and request data as part of normal operation and security protection.

What we do not collect

To be explicit about what this website does not do:

• There is no user registration, login or member area.
• There is no comment function.
• We do not ask you to upload identity documents, financial records or any other sensitive material through the website. Never send us passports, bank statements or due diligence documents by email or web form. If we need them, we will provide a secure transfer method.
• We do not sell, rent or trade personal information to anyone, for any purpose.
• We do not sell your data, and we do not use social media trackers. Optional analytics and measurement cookies run only with your consent — see our Cookie Policy.

Why we use it, and our legal basis

For visitors in the UK, EU or EEA, the GDPR requires us to identify a lawful basis for each use:

What we do	Why	Legal basis
Reply to your enquiry	To answer your question and scope possible work	Steps taken at your request prior to a contract (Art. 6(1)(b))
Keep a short record of the enquiry	To maintain a record of who we have dealt with and what was said	Legitimate interests (Art. 6(1)(f))
Website analytics	To understand which pages are useful and improve the site	Your consent (Art. 6(1)(a))
Security and fraud prevention	To keep the site available and protect it from attack	Legitimate interests (Art. 6(1)(f))
Send you material you asked for	Marketing you have specifically opted into	Your consent (Art. 6(1)(a))
Client due diligence and reporting	Compliance with anti-money-laundering, counter-terrorism financing and citizenship programme requirements	Legal obligation (Art. 6(1)(c))

You can withdraw consent at any time. Withdrawing consent does not affect anything done before you withdrew it.

Who we share it with

We share personal information only where it is necessary, and only with:

• Our website host and IT providers, who process data on our instructions under contract.
• Our analytics provider (Google Analytics), where you have consented to analytics cookies.
• Our email and CRM providers, used to receive and manage enquiries.
• Professional advisers — lawyers, auditors — where required.
• Government authorities and regulators, where we are legally obliged to disclose, including under Vanuatu anti-money-laundering legislation and citizenship programme requirements. Where we do this we are generally prohibited from telling you.

We do not disclose enquiry information to any other third party.

Where your information goes

SKP is based in Vanuatu, and information you send us will be received and stored there. Our service providers may store data in the United States, the European Union, Australia or elsewhere.

Vanuatu is not the subject of an adequacy decision by the European Commission or the UK government. Where we transfer personal information out of the UK, EU or EEA, we rely on:

• your explicit consent, where you have chosen to contact us; and/or
• the transfer being necessary for a contract entered into at your request; and/or
• appropriate safeguards, including the European Commission’s Standard Contractual Clauses, in our agreements with service providers.

You can ask us for more detail about the safeguards that apply.

How long we keep it

• Enquiries that do not lead to an engagement: 24 months from the last contact, then deleted.
• Analytics data: retained by our analytics provider for a maximum of 14 months.
• Marketing consents: until you unsubscribe, plus a suppression record so we do not contact you again in error.
• Server logs: typically 90 days.
• Client files: retained for the minimum period required by Vanuatu anti-money-laundering and counter-terrorism financing legislation and by the Vanuatu Citizenship Commission, and for as long as needed to defend legal claims. This period is set by law and we cannot shorten it at a client’s request.

Your rights

If you are in the UK, EU or EEA you have the right to:

• access the personal information we hold about you, and receive a copy;
• correct information that is wrong or incomplete;
• erase information where we no longer have a valid reason to keep it;
• restrict or object to our use of it, including any use based on legitimate interests;
• portability — receive information you gave us in a machine-readable format;
• withdraw consent at any time; and
• complain to a data protection authority.

To exercise any of these, email info@stanfordknight.com. We will respond within one month. We may ask you to verify your identity first — we will not disclose personal information to someone who cannot show they are entitled to it.

Limits. The right to erasure does not override a legal obligation to retain records. Where we hold client due diligence material under anti-money-laundering law, we cannot delete it on request, and we cannot disclose the contents of a suspicious transaction report or the fact that one has been made.

If you are unhappy with our response you may complain to your national data protection authority. In the UK that is the Information Commissioner’s Office (ico.org.uk); in the EU it is the supervisory authority in your country of residence.

If you are in the United States

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We have not done so in the preceding twelve months.

Depending on your state of residence, you may have the right to know what personal information we hold, to request a copy, to request correction or deletion, and to opt out of sale or targeted advertising. We do not discriminate against anyone who exercises these rights. Use the same contact address above; if you are using an authorised agent we will ask for proof of authorisation.

If you become a client

Client onboarding involves collecting substantially more information than this website does, including:

• identity documents and biometric data for every applicant, including minors;
• evidence of source of funds and source of wealth;
• criminal record certificates and third-party due diligence reports;
• health and family information where the programme requires it.

This information is shared with the Vanuatu Citizenship Commission, the Vanuatu Financial Intelligence Unit where applicable, government-appointed due diligence providers, and our banking and payment partners. Retention is dictated by law. Full details are set out in the client privacy notice and engagement letter you receive before any of this is collected.

Children

This website is not directed at children and we do not knowingly collect information from anyone under 18 through it. Where minors are included in a family application, their information is provided to us by a parent or legal guardian as part of the client process.

Security

We use encryption in transit (HTTPS), access controls, and vetted service providers. No system is completely secure, so please do not send sensitive documents through the website. If we become aware of a breach affecting your personal information we will notify you and the relevant authorities where the law requires it.

Changes

We may update this policy. The current version is always on this page with the date it took effect. Material changes affecting how we use your information will be flagged on the site.

Contact

info@stanfordknight.com
Stanford Knight & Partners Limited, One, The Parc, Winston Churchill Avenue, Port Vila, Vanuatu